We are still waiting updates from cPanel.

Due to this further protections have been added to the WAF and during our testing, this is blocking all request types known currently.

For non-cPanel, this also has been applied to provide mitigation against pre-8 PHP versions.

Updates will still be pushed out as soon as possible.

cPanels latest up date at 16:03 is taht they are working on the issue.

We will release updated PHP packages for cPanel & WHM as soon as possible, following the PHP project’s release of its fixes. cPanel will deliver these updates through the usual distribution channels for cPanel & WHM and EasyApache.

We are monitoring.

As widely known, there is a serious PHP vulnerability affecting all versions of PHP.

Over the last few years we have advised customers to move away from PHP 5 and to use newer versions. Due to the exploit and that no patches for older versions to that level are expected, PHP 5 is being removed across all servers today.

Official support for PHP 5.6 ended on 31 Dec 2018 and whilst we've continued to run a "hardened" version, it is time for this to now end. We apologise for the change although whilst immediate, has been a warning given over the years.

On our non-cPanel platform, 8.2-8-5 are being pushed now and will be completed by 6pm today. Backports are being worked on for version 7.

On our cPanel platform, all servers will have a minimium of 7.4 and a maximum of 8.5, patched as soon sa they are released by cPanel's EA4 tool. On some servers the limit is 8.3 and this is part of the manual server moves we are conducting.

Some mitigations are in place to limit this until all have been patched via WAF.